Process

ubiquitoussigned

oobefodsetup.exe

Microsoft CorporationFirst seen 2026-06-09

File identity

File details
File type
PE32+ executable
Magic
PE32+ executable (console)
Architecture
x64
Original name
OOBEFodSetup.exe
Internal name
OOBEFodSetup.exe
Product
Microsoft® Windows® Operating System
Signing information
Status
Signed
Signature rate
100%
Publisher
Microsoft Corporation
Signer
Microsoft Windows
Issuer
Microsoft Windows Production PCA 2011
Thumbprint
d8fb0cc66a08061b42d46d03546f0d42cbc49b7c
File version1
  • 10.0.26100.1150 (WinBuild.160101.0800)100%
File size1
  • 40.00 KB100%

Execution context

File paths1
  • C:\Windows\System32\OOBEFodSetup.exe100%
User context1
  • SYSTEM100%
Integrity level1
  • System100%
Instances1
  • 1100%
Session1
  • Session 0100%
Token privileges16
  • SeSystemProfilePrivilege100%
  • SeTimeZonePrivilege100%
  • SeCreateGlobalPrivilege100%
  • SeCreatePagefilePrivilege100%
  • SeProfileSingleProcessPrivilege100%

Analysis

About this process

No analyst write-up yet.

Security notes

No analyst write-up yet.

Anomaly signals

None defined yet.

Telemetry

OS prevalence1
  • Windows 11 (26200)100%
Observation timeline
First seen
2026-06-09
Last seen
2026-06-09
Machines
1
Executions
2
Edit this page on GitHub